iPhone's fingerprint tech hacked. (already)

by Glidefan on: 09/23/2013 10:02 AM | source: | 34 comment(s)

By a European hacker group: "A fingerprint of the phone user, photographed from a glass surface, was enough to create a fake finger that could unlock an iPhone 5s secured with TouchID" as claimed by the Chaos Computer Club.

The group also demonstrated a video with the hack that as claimed by them is a simple one, if you already have the fingerprint and is based on previous techniques for spoofing fingerprints.

"First, the fingerprint of the enrolled user is photographed with 2400 dpi resolution. The resulting image is then cleaned up, inverted and laser printed with 1200 dpi onto transparent sheet with a thick toner setting. Finally, pink latex milk or white woodglue is smeared into the pattern created by the toner onto the transparent sheet. After it cures, the thin latex sheet is lifted from the sheet, breathed on to make it a tiny bit moist and then placed onto the sensor to unlock the phone."

7 pages 1 2 3 4 > »

Extraordinary
Senior Member

Posts: 19562
Joined: 2010-04-21

#4660223 Posted on: 09/23/2013 10:11 AM

dcx_badass
Senior Member

Posts: 9978
Joined: 2005-02-26

#4660227 Posted on: 09/23/2013 10:16 AM

That's not really hacking though is it, no more than me saying give me your pin code or I'll kill you.

V@IO
Senior Member

Posts: 494
Joined: 2010-04-12

#4660239 Posted on: 09/23/2013 10:58 AM

That's not really hacking though is it, no more than me saying give me your pin code or I'll kill you.

I fully agree,still need the owners fingerprint to do what they did.

Asgardi
Senior Member

Posts: 247
Joined: 2010-11-13

#4660240 Posted on: 09/23/2013 10:58 AM

Yes and no...

That's not really hacking though is it, no more than me saying give me your pin code or I'll kill you.

Yes and no... I think the point is that Apple said it is new technology that is more secure which was proven to be false argument. The scanner is just more sensitive than before so no new technology there. And it can be circumvented exactly the same way as before if you just make more precise fake.

lucidus
Senior Member

Posts: 11836
Joined: 2011-12-31

#4660241 Posted on: 09/23/2013 11:01 AM

First you need some kind of colored powder or superglue to lift the fingerprint. Then you have to scan the fingerprint, invert it and print it with a resolution of 1200dpi or more onto a transparent sheet. After that, you build your fake finger by smearing pink latex milk or white wood glue into the pattern that the toner created onto the transparent sheet and wait for it to set. Finally, the CCC writes, “the thin latex sheet is lifted from the sheet, breathed on to make it a tiny bit moist and then placed onto the sensor to unlock the phone.” This method should work for virtually every fingerprint scanner on the market today.

http://techcrunch.com/2013/09/22/hackers-bypass-apples-touch-id-with-lifted-fingerprint/

7 pages 1 2 3 4 > »

Post New Comment

Click here to post a comment for this news story on the message forum.